$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft File: Kxn0VfTTBpR34BlB90IUn7kADYE.mft (raw, json) Hash identifier: UXwS1NZ23BcL+Tz3Cki/G/XinMDAf7G6vpWgNfh2t4E= Subject key identifier: 41:64:21:E2:CC:17:4D:29:80:A5:14:7D:D8:9E:A2:2D:A3:79:52:4C Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft Manifest number: 14 Signing time: Tue 12 May 2026 15:39:45 +0000 Manifest this update: Tue 12 May 2026 15:39:44 +0000 Manifest next update: Tue 19 May 2026 15:39:44 +0000 Files and hashes: 1: Kxn0VfTTBpR34BlB90IUn7kADYE.crl (hash: YONPHoISq4eOlqY7P2Hu738SO14uJetEfadfJ3v8Inc=) 2: 41E1B62C439B11F1B25C79F98F833773.roa (hash: j8xid4dONlxMY7HH7HNa8LV+xrw9gr7M/0XOCH5oqWs=) 3: 8556D60A479011F187A637ED9C833773.roa (hash: 01eu5VaZWMdQ7aw7Y4d0DV21vl4g9m72tYmYYG5IqbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Validity Not Before: May 12 15:39:44 2026 GMT Not After : May 19 15:39:44 2026 GMT Subject: CN=6a0349c1-b0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:2e:68:ab:52:48:c5:39:c0:b4:eb:55:36: a1:f6:7f:f8:f5:b7:5d:69:7e:4f:8c:1d:49:31:33: 67:1c:07:dd:f9:a4:b1:93:be:78:b6:34:fe:a8:80: 91:d7:a8:50:6c:46:8d:b8:a1:4c:51:0a:05:f7:0b: 2d:e9:73:ff:db:d1:5d:84:65:29:81:ad:78:0d:ed: 4c:12:01:de:d2:e8:34:b5:8f:c8:fa:50:34:44:94: cb:17:a1:42:eb:9c:c8:dd:9e:93:61:5a:25:9e:0f: 1e:ef:f0:09:d7:e5:d5:6e:15:44:56:2f:39:81:0b: 6e:d5:fc:51:2f:b6:6f:7f:9f:42:f4:cf:8d:a5:d0: bb:2c:f8:82:68:24:9f:0b:58:87:f8:e2:eb:d3:1b: e2:be:1e:59:ef:2a:e7:15:ab:12:6b:52:fd:c5:b2: 07:25:76:a0:8f:42:90:71:96:1a:50:52:dd:5a:15: de:c3:86:54:ca:62:d2:f1:47:e9:1f:43:10:c1:24: a6:7c:f7:65:5f:3b:0e:df:42:94:70:93:a7:65:d5: 75:6f:d0:04:69:76:2e:55:f8:e1:cf:8e:eb:a3:ce: 1d:e1:cd:fc:65:c5:af:0c:c5:c7:08:0e:b2:6c:67: c6:44:5c:c1:85:49:d8:f5:5c:0f:0e:86:b6:d9:80: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:21:E2:CC:17:4D:29:80:A5:14:7D:D8:9E:A2:2D:A3:79:52:4C X509v3 Authority Key Identifier: keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:85:63:19:41:8f:04:4b:e9:75:4a:12:90:d7:56:76:dc:a9: 67:9a:05:66:3c:7f:73:39:38:77:82:0a:11:f1:a2:c3:0f:d8: 61:2d:f9:30:74:ce:5a:ca:bc:70:d2:19:df:50:1f:c6:e2:58: e2:f0:61:c5:ab:4d:eb:1c:ae:58:eb:47:3c:5c:4a:ce:f8:d4: d9:ae:92:05:64:b4:c7:0e:37:0e:a3:33:d3:80:d8:ee:44:09: 16:02:3b:2b:09:47:a6:dc:f0:b3:fd:e2:1a:13:49:bb:25:82: e7:79:88:60:d6:ac:ad:10:d5:73:34:ae:20:59:31:0d:36:b4: e6:e4:1e:e2:e1:99:1d:74:32:5a:53:da:97:23:a9:f9:40:71: ee:c2:93:d1:34:f0:09:eb:5e:85:26:9c:6b:40:cd:19:d6:c9: e7:8b:6e:10:2b:94:08:4f:57:d3:d6:c0:f6:d1:5b:7d:b6:db: 24:8b:41:92:c0:cd:d3:67:47:39:d1:01:c6:cc:af:49:99:c5: 31:72:90:ef:7d:36:58:42:d5:89:cf:a6:da:f1:3b:b2:dd:74: 2c:4d:10:44:6a:f5:cc:9d:c2:4c:d6:1e:c0:d7:ac:37:57:33: 26:2e:af:42:f5:3b:df:b0:94:bf:0f:66:99:13:08:f9:ad:ad: 96:30:0d:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjIyRjExMC8GA1UEBRMoMkIxOUY0NTVGNEQzMDY5NDc3RTAxOTQxRjc0MjE0OUZC OTAwMEQ4MTAeFw0yNjA1MTIxNTM5NDRaFw0yNjA1MTkxNTM5NDRaMBgxFjAUBgNV BAMTDTZhMDM0OWMxLWIwYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKLy5oq1JIxTnAtOtVNqH2f/j1t11pfk+MHUkxM2ccB935pLGTvni2NP6ogJHX qFBsRo24oUxRCgX3Cy3pc//b0V2EZSmBrXgN7UwSAd7S6DS1j8j6UDRElMsXoULr nMjdnpNhWiWeDx7v8AnX5dVuFURWLzmBC27V/FEvtm9/n0L0z42l0Lss+IJoJJ8L WIf44uvTG+K+HlnvKucVqxJrUv3FsgcldqCPQpBxlhpQUt1aFd7DhlTKYtLxR+kf QxDBJKZ892VfOw7fQpRwk6dl1XVv0ARpdi5V+OHPjuujzh3hzfxlxa8MxccIDrJs Z8ZEXMGFSdj1XA8OhrbZgC6bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQWQh4swX TSmApRR92J6iLaN5UkwwHwYDVR0jBBgwFoAUKxn0VfTTBpR34BlB90IUn7kADYEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2MjJGLzJDQUU2MjZDM0U2 MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBSMzRCbEI5MElVbjdrQURZ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS3huMFZmVFRCcFIzNEJsQjkwSVVuN2tBRFlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 MjJGLzJDQUU2MjZDM0U2MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBS MzRCbEI5MElVbjdrQURZRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdhWMZQY8ES+l1ShKQ11Z23KlnmgVmPH9zOTh3ggoR8aLDD9hhLfkwdM5ayrxw 0hnfUB/G4lji8GHFq03rHK5Y60c8XErO+NTZrpIFZLTHDjcOozPTgNjuRAkWAjsr CUem3PCz/eIaE0m7JYLneYhg1qytENVzNK4gWTENNrTm5B7i4ZkddDJaU9qXI6n5 QHHuwpPRNPAJ616FJpxrQM0Z1snni24QK5QIT1fT1sD20Vt9ttski0GSwM3TZ0c5 0QHGzK9JmcUxcpDvfTZYQtWJz6ba8Tuy3XQsTRBEavXMncJM1h7A16w3VzMmLq9C 9TvfsJS/D2aZEwj5ra2WMA2b -----END CERTIFICATE-----Generated at Wed May 13 12:08:26 2026 by rpki-client